The AJAX callbacks require the permission "View CiviNodes", but it isn't defined in civinode_perm(). This looks to be a simple oversight in the backporting of recent improvements. Solution: add this perm in.

CommentFileSizeAuthor
civinode-perm.patch545 bytesnedjo

Comments

Torenware’s picture

Torenware commented
Assigned: Unassigned » Torenware
Status: Needs review » Fixed

Hm... right you are. I'd better check HEAD as well, since this was probably fixed in my private SVN repository and not propogated.

I've applied your patch and checked it in. Thanks.

R

Torenware’s picture

Torenware commented

One minor change: I looked at 5.0, and see that I did indeed catch this issue and fix it. But since I took the nodifying code out, I changed the name of the permission to "View CiviCRM Data", which better describes what the permission does.

I've now backported this to 4.7 for consistency.

Anonymous’s picture

(not verified) commented
Status: Fixed » Closed (fixed)